Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E0CF5/4BB7C644492B11EFBE10184FC4F9AE02/gTpuT37cWLx6SLbR_XwZ39go8fE.mft
File:                     gTpuT37cWLx6SLbR_XwZ39go8fE.mft (raw, json)
Hash identifier:          /UGLWsyKPZEsin+xtcxmFIhT9ehLLMJ6hazPlAW3oSE=
Subject key identifier:   06:A8:39:51:62:61:F9:EE:BE:5B:51:C1:D0:53:1F:4C:30:71:E8:77
Authority key identifier: 81:3A:6E:4F:7E:DC:58:BC:7A:48:B6:D1:FD:7C:19:DF:D8:28:F1:F1
Certificate issuer:       /CN=A91E0CF5/serialNumber=813A6E4F7EDC58BC7A48B6D1FD7C19DFD828F1F1
Certificate serial:       0143
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gTpuT37cWLx6SLbR_XwZ39go8fE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E0CF5/4BB7C644492B11EFBE10184FC4F9AE02/gTpuT37cWLx6SLbR_XwZ39go8fE.mft
Manifest number:          013B
Signing time:             Wed 25 Mar 2026 04:37:35 +0000
Manifest this update:     Wed 25 Mar 2026 04:37:34 +0000
Manifest next update:     Wed 01 Apr 2026 04:37:34 +0000
Files and hashes:         1: gTpuT37cWLx6SLbR_XwZ39go8fE.crl (hash: Ahgv2uuGfGyZYvsQIywrU/PSrJlsAeIZfqrPlWvwsxo=)
                          2: C0F3F504492B11EF8EF0D04FC4F9AE02.roa (hash: WEMy1UznZiqhO5f2R7BagxgiASiR/owyhwN0nQgeHAs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E0CF5/4BB7C644492B11EFBE10184FC4F9AE02/gTpuT37cWLx6SLbR_XwZ39go8fE.crl
                          rsync://rpki.apnic.net/member_repository/A91E0CF5/4BB7C644492B11EFBE10184FC4F9AE02/gTpuT37cWLx6SLbR_XwZ39go8fE.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gTpuT37cWLx6SLbR_XwZ39go8fE.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 04:37:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 323 (0x143)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E0CF5, serialNumber=813A6E4F7EDC58BC7A48B6D1FD7C19DFD828F1F1
        Validity
            Not Before: Mar 25 04:37:34 2026 GMT
            Not After : Apr  1 04:37:34 2026 GMT
        Subject: CN=69c3668f-8f3d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:5f:53:93:f9:7d:1f:15:84:68:7f:d2:d8:ca:
                    30:df:2d:34:78:a4:08:82:fc:c8:9b:1c:e4:0d:dc:
                    c9:fe:9d:e0:41:b5:1a:47:80:02:67:f7:88:b6:c0:
                    dd:7a:a4:5b:48:45:d3:99:a7:ac:ae:fd:84:60:27:
                    1a:fe:fb:9d:2b:55:c5:07:66:47:48:fa:47:f4:b0:
                    aa:cc:50:33:3c:9b:c7:1f:b1:3e:a0:24:1d:4b:08:
                    bb:fc:b4:ae:e9:a0:84:8c:50:65:42:0c:c0:2a:c2:
                    b8:f2:a6:e6:c8:13:65:9a:b1:14:f1:1e:53:13:ad:
                    ff:e0:c0:4e:b8:d7:2d:b6:7c:d4:3e:11:ab:82:da:
                    b6:80:6a:7b:36:ea:d6:9b:72:54:82:4c:57:76:c5:
                    33:ce:36:b8:27:72:8b:5c:3c:a4:b5:1e:f7:b5:d4:
                    51:ff:86:70:8b:ac:00:2f:fb:85:56:08:d4:10:cf:
                    0e:49:ea:86:9f:36:15:70:a7:20:7b:60:59:7c:37:
                    be:bf:aa:f3:03:89:0e:72:94:a5:a3:e9:b1:a8:98:
                    53:62:66:9c:9a:9d:f3:d7:82:fd:2a:0a:10:ae:99:
                    67:d7:a2:8a:9a:f0:0a:21:a2:65:d5:3a:e3:57:a5:
                    9f:6b:c6:e6:44:a3:a6:48:fd:f4:25:d3:2c:e4:f6:
                    b2:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:A8:39:51:62:61:F9:EE:BE:5B:51:C1:D0:53:1F:4C:30:71:E8:77
            X509v3 Authority Key Identifier:
                keyid:81:3A:6E:4F:7E:DC:58:BC:7A:48:B6:D1:FD:7C:19:DF:D8:28:F1:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E0CF5/4BB7C644492B11EFBE10184FC4F9AE02/gTpuT37cWLx6SLbR_XwZ39go8fE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gTpuT37cWLx6SLbR_XwZ39go8fE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E0CF5/4BB7C644492B11EFBE10184FC4F9AE02/gTpuT37cWLx6SLbR_XwZ39go8fE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:2b:a0:4a:3e:87:58:fa:6d:d2:8f:3c:f1:1f:9d:63:26:b8:
         20:27:11:45:70:d4:a7:8a:55:30:23:17:0c:f8:b7:d9:f1:78:
         5b:f1:a9:93:e1:44:70:db:b3:9b:20:93:02:0d:d9:16:a9:04:
         55:50:33:4f:87:57:9e:76:4b:01:2a:6f:7e:46:e0:ad:00:bf:
         07:6b:af:a8:66:9e:ff:99:18:6c:2e:84:d8:38:f8:a0:df:39:
         87:7d:a1:de:a9:31:a6:85:f8:0e:a9:cf:ac:8c:af:c1:39:95:
         6d:77:b2:c6:8e:cd:c0:23:9c:b1:55:a7:e0:3b:7e:05:50:a7:
         77:9f:ee:61:f3:75:0d:b3:32:ba:57:cf:b4:6a:9c:45:03:7b:
         28:a4:1a:1e:7e:b1:58:5b:bc:47:ec:07:1c:01:00:aa:0e:23:
         cf:e3:94:00:08:bb:ee:f8:92:ad:b3:92:7a:2b:79:28:f3:96:
         86:d9:14:0a:46:dc:79:ee:1d:99:0b:f5:f0:d7:b0:a0:4c:36:
         d6:97:e2:cb:f7:06:33:e3:ce:58:77:5f:f6:83:dc:55:60:9b:
         4e:87:27:4a:a1:b1:4f:fa:5a:08:c4:83:4f:22:61:27:7b:15:
         2e:3a:9c:0c:6c:2c:3f:d7:ca:9c:dd:d9:82:b4:08:5a:2d:a3:
         11:d9:bf:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:19:56 2026 by rpki-client